=========================================================== .___ __ __ _________________ __ __ __| _/|__|/ |_ / ___\_` __ \__ \ | | \/ __ | | \\_ __\ / /_/ > | \// __ \| | / /_/ | | || | \___ /|__| (____ /____/\____ | |__||__| /_____/ \/ \/ grep rough audit - static analysis tool v2.8 written by @Wireghoul =================================[justanotherhacker.com]=== haxe-4.1.4/Makefile-197- echo $$INSTKB ; \ haxe-4.1.4/Makefile:198: INSTKBH=`expr $$INSTKB - 4`; \ haxe-4.1.4/Makefile-199- echo $$INSTKBH ;\ ############################################## haxe-4.1.4/extra/CHANGES.txt-845- all : disabled analyzer optimizations by default, re-enable with -D analyzer-optimize haxe-4.1.4/extra/CHANGES.txt:846: php7 : generate native `$v instanceof MyType` instead of `Std.is(v, MyType)` where possible for better performance haxe-4.1.4/extra/CHANGES.txt-847- php7 : added @:phpNoConstructor meta for externs which do not have native php constructors and yet can be constructed ############################################## haxe-4.1.4/extra/FileAssociation.nsh-78- !verbose ${_FileAssociation_VERBOSE} haxe-4.1.4/extra/FileAssociation.nsh:79: Push `${_DESCRIPTION}` haxe-4.1.4/extra/FileAssociation.nsh:80: Push `${_EXTENSION}` haxe-4.1.4/extra/FileAssociation.nsh:81: Push `${_EXECUTABLE}` haxe-4.1.4/extra/FileAssociation.nsh-82- ${CallArtificialFunction} RegisterExtension_ ############################################## haxe-4.1.4/extra/FileAssociation.nsh-88- !verbose ${_FileAssociation_VERBOSE} haxe-4.1.4/extra/FileAssociation.nsh:89: Push `${_EXTENSION}` haxe-4.1.4/extra/FileAssociation.nsh:90: Push `${_DESCRIPTION}` haxe-4.1.4/extra/FileAssociation.nsh-91- ${CallArtificialFunction} UnRegisterExtension_ ############################################## haxe-4.1.4/extra/azure-pipelines/install-neko-snapshot.yaml-18- tar -xf $(Agent.TempDirectory)/neko_latest.tar.gz -C $(Agent.TempDirectory) haxe-4.1.4/extra/azure-pipelines/install-neko-snapshot.yaml:19: NEKOPATH=`echo $(Agent.TempDirectory)/neko-*-*` haxe-4.1.4/extra/azure-pipelines/install-neko-snapshot.yaml-20- sudo mkdir -p /usr/local/bin ############################################## haxe-4.1.4/extra/haxelib_src/README.md-25- haxe-4.1.4/extra/haxelib_src/README.md:26:The command above will copy the server source code and website resources into a container, compile it, and then start Apache to serve it. To view the website, visit `http://localhost:2000/` (or `http://$(docker-machine ip):2000/` if the Docker Toolbox is used). haxe-4.1.4/extra/haxelib_src/README.md-27- ############################################## haxe-4.1.4/extra/haxelib_src/README.md-42- haxe-4.1.4/extra/haxelib_src/README.md:43:To run haxelib client with this local server, prepend the arguments, `-R $SERVER_URL`, to each of the haxelib commands, e.g.: haxe-4.1.4/extra/haxelib_src/README.md-44-``` ############################################## haxe-4.1.4/extra/haxelib_src/src/haxelib/Data.hx-328- } haxe-4.1.4/extra/haxelib_src/src/haxelib/Data.hx:329: throw 'Class path `${infos.classPath}` not found'; haxe-4.1.4/extra/haxelib_src/src/haxelib/Data.hx-330- } ############################################## haxe-4.1.4/extra/haxelib_src/src/haxelib/client/Main.hx-218- addCommand("local", local, "install the specified package locally", Deprecated("Use `haxelib install <file>` instead"), false); haxe-4.1.4/extra/haxelib_src/src/haxelib/client/Main.hx:219: addCommand("selfupdate", updateSelf, "update haxelib itself", Deprecated('Use `haxelib --global update $HAXELIB_LIBNAME` instead')); haxe-4.1.4/extra/haxelib_src/src/haxelib/client/Main.hx-220- ############################################## haxe-4.1.4/extra/haxelib_src/src/haxelib/client/Main.hx-249- if (latest != null && latest > VERSION) haxe-4.1.4/extra/haxelib_src/src/haxelib/client/Main.hx:250: print('\nA new version ($latest) of haxelib is available.\nDo `haxelib --global update $HAXELIB_LIBNAME` to get the latest version.\n'); haxe-4.1.4/extra/haxelib_src/src/haxelib/client/Main.hx-251- } ############################################## haxe-4.1.4/extra/haxelib_src/src/haxelib/client/Main.hx-489- case Deprecated(message): haxe-4.1.4/extra/haxelib_src/src/haxelib/client/Main.hx:490: Sys.println('Warning: Command `$cmd` is deprecated and will be removed in future. $message.'); haxe-4.1.4/extra/haxelib_src/src/haxelib/client/Main.hx-491- default: ############################################## haxe-4.1.4/extra/haxelib_src/src/haxelib/server/Repo.hx-88- haxe-4.1.4/extra/haxelib_src/src/haxelib/server/Repo.hx:89: var vl = Version.manager.unsafeObjects('SELECT * FROM Version WHERE project = ${p.id} ORDER BY major DESC, minor DESC, patch DESC, ifnull(preview, 100) DESC, previewNum DESC LIMIT 1', false); haxe-4.1.4/extra/haxelib_src/src/haxelib/server/Repo.hx-90- return vl.first().toSemver(); ############################################## haxe-4.1.4/extra/haxelib_src/src/website/controller/HomeController.hx-150- haxe-4.1.4/extra/haxelib_src/src/website/controller/HomeController.hx:151: // TODO: get ufront-mvc to support `/t/$tagName` and `/t/$tagName.json` as different routes. haxe-4.1.4/extra/haxelib_src/src/website/controller/HomeController.hx-152- @cacheRequest ############################################## haxe-4.1.4/libs/ilib/ilMeta.mli-1032- (* instance method that has an instance pointer (this) *) haxe-4.1.4/libs/ilib/ilMeta.mli:1033: (* as an implicit first argument - ilasm 'instance' *) haxe-4.1.4/libs/ilib/ilMeta.mli-1034- | CallExplicitThis (* 0x40 *) haxe-4.1.4/libs/ilib/ilMeta.mli-1035- (* the first explicitly specified parameter is the instance pointer *) haxe-4.1.4/libs/ilib/ilMeta.mli:1036: (* ilasm 'explicit' *) haxe-4.1.4/libs/ilib/ilMeta.mli-1037- ############################################## haxe-4.1.4/libs/ilib/peData.ml-181- (* contains information about four other tables, which hold data describing *) haxe-4.1.4/libs/ilib/peData.ml:182: (* unmanaged exports of the PE file. ILAsm and VC++ linker are capable of exposing *) haxe-4.1.4/libs/ilib/peData.ml-183- (* the managed PE file as unmanaged exports *) ############################################## haxe-4.1.4/libs/objsize/c_objsize.c-44-int caml_page_table_lookup(void * addr); haxe-4.1.4/libs/objsize/c_objsize.c:45:#define Classify_addr(a) (caml_page_table_lookup((void *)(a))) haxe-4.1.4/libs/objsize/c_objsize.c-46- ############################################## haxe-4.1.4/libs/objsize/c_objsize.c-58- ((((uintnat)(a)) >> Page_log) & (Pagetable2_size - 1)) haxe-4.1.4/libs/objsize/c_objsize.c:59:#define Classify_addr(a) \ haxe-4.1.4/libs/objsize/c_objsize.c-60- caml_page_table[Pagetable_index1(a)][Pagetable_index2(a)] ############################################## haxe-4.1.4/libs/objsize/c_objsize.c-63- haxe-4.1.4/libs/objsize/c_objsize.c:64:#define Is_in_heap_or_young(a) (Classify_addr(a) & (In_heap | In_young)) haxe-4.1.4/libs/objsize/c_objsize.c-65- ############################################## haxe-4.1.4/src/generators/genjs.ml-555- print ctx ")"; haxe-4.1.4/src/generators/genjs.ml:556: (* Don't generate `$iterator(value)` for exprs like `value.iterator--` *) haxe-4.1.4/src/generators/genjs.ml-557- | TUnop (op,flag,({eexpr = TField (x,f)} as fe)) when is_iterator_field_access f && is_dynamic_iterator ctx fe -> ############################################## haxe-4.1.4/src/generators/genphp7.ml-778-(** haxe-4.1.4/src/generators/genphp7.ml:779: Check if `subject_arg` and `type_arg` can be generated as `$subject instanceof Type` expression. haxe-4.1.4/src/generators/genphp7.ml-780-*) ############################################## haxe-4.1.4/src/generators/genphp7.ml-2467- (** haxe-4.1.4/src/generators/genphp7.ml:2468: Writes `$left ?? $right` expression to output buffer (for `php.Syntax.coalesce()`) haxe-4.1.4/src/generators/genphp7.ml-2469- *) ############################################## haxe-4.1.4/src/generators/genphp7.ml-2497- (** haxe-4.1.4/src/generators/genphp7.ml:2498: Writes either a "Cls::class" expression (if class is passed directly) or a `$cls->phpClassName` expression haxe-4.1.4/src/generators/genphp7.ml-2499- (if class is passed as a variable) to output buffer (for `php.Syntax.nativeClassName()`) ############################################## haxe-4.1.4/src/macro/eval/evalStdLib.ml-1411- let ip = decode_i32 ip in haxe-4.1.4/src/macro/eval/evalStdLib.ml:1412: try create_unknown (catch_unix_error Unix.gethostbyaddr (int32_addr ip)).h_name with Not_found -> exc_string "Could not reverse host" haxe-4.1.4/src/macro/eval/evalStdLib.ml-1413- ) ############################################## haxe-4.1.4/src/macro/eval/evalStdLib.ml-1416- let ip = decode_i32 ip in haxe-4.1.4/src/macro/eval/evalStdLib.ml:1417: create_unknown (catch_unix_error Unix.string_of_inet_addr (int32_addr ip)) haxe-4.1.4/src/macro/eval/evalStdLib.ml-1418- ) ############################################## haxe-4.1.4/src/syntax/reification.ml-111- | _ -> haxe-4.1.4/src/syntax/reification.ml:112: (* `macro : $TP<Int>` conveys the intent to use TP and overwrite the haxe-4.1.4/src/syntax/reification.ml-113- type parameters. *) ############################################## haxe-4.1.4/std/EReg.hx-166- haxe-4.1.4/std/EReg.hx:167: If `by` contains `$1` to `$9`, the digit corresponds to number of a haxe-4.1.4/std/EReg.hx-168- matched sub-group and its value is used instead. If no such sub-group haxe-4.1.4/std/EReg.hx:169: exists, the replacement is unspecified. The string `$$` becomes `$`. haxe-4.1.4/std/EReg.hx-170- ############################################## haxe-4.1.4/std/cs/_std/sys/db/Sqlite.hx-43- if (t == null) { haxe-4.1.4/std/cs/_std/sys/db/Sqlite.hx:44: var asm = cs.system.reflection.Assembly.Load('Mono.Data.Sqlite'); haxe-4.1.4/std/cs/_std/sys/db/Sqlite.hx-45- t = asm.GetType('Mono.Data.Sqlite.SqliteConnection'); ############################################## haxe-4.1.4/std/haxe/Template.hx-103- haxe-4.1.4/std/haxe/Template.hx:104: If `macros` has a field `name`, all occurrences of `$$name(args)` are haxe-4.1.4/std/haxe/Template.hx-105- replaced with the result of calling that field. The first argument is ############################################## haxe-4.1.4/std/haxe/io/Mime.hx-26- var VideoXMsAsf = 'video/x-ms-asf'; haxe-4.1.4/std/haxe/io/Mime.hx:27: var TextXAsm = 'text/x-asm'; haxe-4.1.4/std/haxe/io/Mime.hx-28- var TextAsp = 'text/asp'; ############################################## haxe-4.1.4/std/js/lib/WebAssembly.hx-51- The `WebAssembly.instantiateStreaming()` function compiles and instantiates a WebAssembly module haxe-4.1.4/std/js/lib/WebAssembly.hx:52: directly from a streamed underlying source. This is the most efficient, optimized way to load wasm code. haxe-4.1.4/std/js/lib/WebAssembly.hx-53- **/ ############################################## haxe-4.1.4/std/js/lib/WebAssembly.hx-71- The `WebAssembly.validate()` function validates a given typed array of WebAssembly binary code, haxe-4.1.4/std/js/lib/WebAssembly.hx:72: returning whether the bytes form a valid wasm module (`true`) or not (`false`). haxe-4.1.4/std/js/lib/WebAssembly.hx-73- **/ ############################################## haxe-4.1.4/std/php/Global.hx-942- **/ haxe-4.1.4/std/php/Global.hx:943: static function fpassthru(handle:Resource):Int; haxe-4.1.4/std/php/Global.hx-944- ############################################## haxe-4.1.4/std/php/Global.hx-1287- **/ haxe-4.1.4/std/php/Global.hx:1288: static function gethostbyaddr(ip_address:String):EitherType<String, Bool>; haxe-4.1.4/std/php/Global.hx-1289- ############################################## haxe-4.1.4/std/php/Lib.hx-89- public static inline function printFile(file:String) { haxe-4.1.4/std/php/Lib.hx:90: return Global.fpassthru(Global.fopen(file, "r")); haxe-4.1.4/std/php/Lib.hx-91- } ############################################## haxe-4.1.4/std/php/Syntax.hx-56- /** haxe-4.1.4/std/php/Syntax.hx:57: Generates `$left <=> $right` haxe-4.1.4/std/php/Syntax.hx-58- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-63- /** haxe-4.1.4/std/php/Syntax.hx:64: Generates `$left ?? $right` haxe-4.1.4/std/php/Syntax.hx-65- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-68- /** haxe-4.1.4/std/php/Syntax.hx:69: Generates `$left . $right` haxe-4.1.4/std/php/Syntax.hx-70- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-75- /** haxe-4.1.4/std/php/Syntax.hx:76: Generates `$left == $right` haxe-4.1.4/std/php/Syntax.hx-77- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-82- /** haxe-4.1.4/std/php/Syntax.hx:83: Generates `$left === $right` haxe-4.1.4/std/php/Syntax.hx-84- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-89- /** haxe-4.1.4/std/php/Syntax.hx:90: Generates `$left != $right` haxe-4.1.4/std/php/Syntax.hx-91- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-96- /** haxe-4.1.4/std/php/Syntax.hx:97: Generates `$left !== $right` haxe-4.1.4/std/php/Syntax.hx-98- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-103- /** haxe-4.1.4/std/php/Syntax.hx:104: Generates `$left + $right` for numbers. haxe-4.1.4/std/php/Syntax.hx-105- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-110- /** haxe-4.1.4/std/php/Syntax.hx:111: Generates `$left + $right` for php arrays. haxe-4.1.4/std/php/Syntax.hx-112- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-117- /** haxe-4.1.4/std/php/Syntax.hx:118: Generates `$left ** $right` haxe-4.1.4/std/php/Syntax.hx-119- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-124- /** haxe-4.1.4/std/php/Syntax.hx:125: Generates `$left % $right` haxe-4.1.4/std/php/Syntax.hx-126- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-131- /** haxe-4.1.4/std/php/Syntax.hx:132: Generates `$left ?: $right` haxe-4.1.4/std/php/Syntax.hx-133- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-138- /** haxe-4.1.4/std/php/Syntax.hx:139: Generates `$left xor $right` haxe-4.1.4/std/php/Syntax.hx-140- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-145- /** haxe-4.1.4/std/php/Syntax.hx:146: Generates `(int)$value` haxe-4.1.4/std/php/Syntax.hx-147- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-152- /** haxe-4.1.4/std/php/Syntax.hx:153: Generates `(float)$value` haxe-4.1.4/std/php/Syntax.hx-154- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-159- /** haxe-4.1.4/std/php/Syntax.hx:160: Generates `(string)$value` haxe-4.1.4/std/php/Syntax.hx-161- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-166- /** haxe-4.1.4/std/php/Syntax.hx:167: Generates `(bool)$value` haxe-4.1.4/std/php/Syntax.hx-168- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-173- /** haxe-4.1.4/std/php/Syntax.hx:174: Generates `(object)$value` haxe-4.1.4/std/php/Syntax.hx-175- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-180- /** haxe-4.1.4/std/php/Syntax.hx:181: Generates `(array)$value` haxe-4.1.4/std/php/Syntax.hx-182- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-187- /** haxe-4.1.4/std/php/Syntax.hx:188: Generates `$value instanceof $phpClassName`. haxe-4.1.4/std/php/Syntax.hx:189: Haxe generates `Std.isOfType(value, Type)` calls as `$value instanceof Type` automatically where possible. haxe-4.1.4/std/php/Syntax.hx-190- So you may need this only if you have a `Class` stored in a variable. ############################################## haxe-4.1.4/std/php/Syntax.hx-229- /** haxe-4.1.4/std/php/Syntax.hx:230: Generates `new $className($arg1, ...$argN)` haxe-4.1.4/std/php/Syntax.hx-231- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-261- /** haxe-4.1.4/std/php/Syntax.hx:262: Generates a call to instance method: `$object->{$methodName}(<args>)` haxe-4.1.4/std/php/Syntax.hx-263- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-266- /** haxe-4.1.4/std/php/Syntax.hx:267: Generates a call to static method: `$className::{$methodName}(<args>)` haxe-4.1.4/std/php/Syntax.hx-268- **/ ############################################## haxe-4.1.4/std/php/Syntax.hx-314- /** haxe-4.1.4/std/php/Syntax.hx:315: Generates `clone $value`. haxe-4.1.4/std/php/Syntax.hx-316- @see http://php.net/manual/en/language.oop5.cloning.php ############################################## haxe-4.1.4/std/php/Syntax.hx-322- /** haxe-4.1.4/std/php/Syntax.hx:323: Generates `yield $value`. haxe-4.1.4/std/php/Syntax.hx-324- @see http://php.net/manual/en/language.generators.syntax.php ############################################## haxe-4.1.4/std/php/Syntax.hx-330- /** haxe-4.1.4/std/php/Syntax.hx:331: Generates `yield $key => $value`. haxe-4.1.4/std/php/Syntax.hx-332- @see http://php.net/manual/en/language.generators.syntax.php ############################################## haxe-4.1.4/std/php/Syntax.hx-338- /** haxe-4.1.4/std/php/Syntax.hx:339: Generates `yield for $value`. haxe-4.1.4/std/php/Syntax.hx-340- @see http://php.net/manual/en/language.generators.syntax.php ############################################## haxe-4.1.4/std/php/_std/sys/net/Host.hx-55- public function reverse():String { haxe-4.1.4/std/php/_std/sys/net/Host.hx:56: return gethostbyaddr(_ip); haxe-4.1.4/std/php/_std/sys/net/Host.hx-57- } ############################################## haxe-4.1.4/tests/README.md-47- 2. Compile the script: `haxe RunCi.hxml`. haxe-4.1.4/tests/README.md:48: 3. Define the test target by `export TEST=$TARGET` (or `set "TEST=$TARGET"` on Windows), where `$TARGET` should be a comma-seperated list of targets, e.g. `neko,macro`. Possible targets are `macro`, `neko`, `js`, `lua`, `php`, `cpp`, `flash9`, `java`, `cs`, `python`, and `third-party`. However, `flash9` and `third-party` are not likely to work on local machines (TODO). haxe-4.1.4/tests/README.md-49- 4. Run it: `neko RunCi.n`. ############################################## haxe-4.1.4/tests/misc/cs/csTwoLibs/Main.hx-4- { haxe-4.1.4/tests/misc/cs/csTwoLibs/Main.hx:5: var asm = cs.system.reflection.Assembly.LoadFile(sys.FileSystem.fullPath("bin/lib1/bin/lib1.dll")); haxe-4.1.4/tests/misc/cs/csTwoLibs/Main.hx-6- var name = #if no_root "haxe.root.Lib1" #else "Lib1" #end; ############################################## haxe-4.1.4/tests/runci/Deployment.hx-10-class Deployment { haxe-4.1.4/tests/runci/Deployment.hx:11: static var S3_HXBUILDS_ADDR(default, null) = 's3://hxbuilds/builds/haxe'; haxe-4.1.4/tests/runci/Deployment.hx-12- ############################################## haxe-4.1.4/tests/runci/Deployment.hx-131- { haxe-4.1.4/tests/runci/Deployment.hx:132: var proc = new sys.io.Process('$cygRoot/bin/bash', ['-lc', '/usr/bin/cygpath -w "`which $name`"']); haxe-4.1.4/tests/runci/Deployment.hx-133- var out = proc.stdout.readAll().toString().trim(); ############################################## haxe-4.1.4/tests/unit/src/unit/issues/misc/Issue8919Macro.hx-14- case _: haxe-4.1.4/tests/unit/src/unit/issues/misc/Issue8919Macro.hx:15: var msg = '`${fieldAccess.toString()}` should be typed as `TField({ t:TType(TypeTd) }, _)`'; haxe-4.1.4/tests/unit/src/unit/issues/misc/Issue8919Macro.hx-16- macro @:pos(fieldAccess.pos) assert($v{msg}); ############################################## haxe-4.1.4/debian/haxe.bash-completion-88- ## normal shell completion. haxe-4.1.4/debian/haxe.bash-completion:89: firstchar=`expr substr "${cur}" 1 1` haxe-4.1.4/debian/haxe.bash-completion-90- if [ "$firstchar" = "-" ]; then